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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 
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4a) Of the above claim(s) is/are withdrawn from consideration. 
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Application Papers 
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* See the attached detailed Office action for a list of the certified copies not received. 



Attachment(s) 

1) CH Notice of References Cited (PTO-892) 

2) n Notice of Draftsperson's Patent Drawing Review (PTO-948) 

3) CD Information Disclosure Statement(s) (PTO-1449 or PTO/SB/08) 

Paper No(s)/Mail Date . 



4) n Interview Summary (PTO-413) 

Paper No(s)/IVIail Date. . 

5) [m Notice of Informal Patent Application (PTO-1 52) 

6) □ Other: . 



U.S. Patent and Trademark Office 
PTOL-326 (Rev. 1-04) 



Office Action Summary 



Part of Paper No./Mail Date 20040625 



Application/Control Number: Page 2 

09/483,723 

Art Unit: 3621 

DETAILED ACTION 
Status of Claims 

1 . This action is in response to the annendnrient filed on 30 March 2004. 

2. Claims 1 1-23. 34-46, and 57-105 have been examined. 

Previous Claim Rejections - 35 USC § 101 

3. Claims 1 1 and 34 were rejected under 35 U.S.C. 101 because the claimed 
invention is directed to nonstatutory subject matter. The Examiner hereby 
rescinds these rejections. 

Previous Claim Rejections - 35 USC § 112 

4. Claims 11, 34, and 57 were rejected under 35 U.S.C. 112, second 
paragraph, as being indefinite for failing to particularly point out and 
distinctly claim the subject matter which applicant regards as the 
invention. The Examiner hereby withdraws these rejections. 

Response to Arguments 

5. Applicants arguments received on 30 March 2004 have been fully 
considered but they are not persuasive. Referring to the previous Office 
action, Examiner has cited relevant portions of the references as a means 
to illustrate the systems as taught by the prior art. As a means of 
providing further clarification as to what is taught by the references used in 
the first Office action, Examiner has expanded the teachings for 
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comprehensibility while maintaining the same grounds of rejection of the 
claims, except as noted above in the section labeled "Status of Claims." 
This information is intended to assist in illuminating the teachings of the 
references while providing evidence that establishes further support for 
the rejections of the claims. 

With regard to the limitations of claim 11, Applicant argues that 
neither Taylor nor Pressman teaches, discloses, or suggests at least 
determining a set of zero or more restrictions to be imposed on said 
customized implementations and instantiating a wrapper class to give rise 
to a wrapper instance, said wrapper instance comprising enforcement 
logic for enforcing said restrictions. However, the Applicant is merely 
stating rudimentary functionality of object-oriented programming and 
design. These features are inherent to any OOD system. The 
combinations of Taylor/Pressman as shown below clearly disclose object 
oriented programming, design, and applications, inherently and explicitly 
disclosing the argued features of the claimed invention. 

6. The following is a Final Rejection of all claims and associated limitations 
pending in the current application as amended in paper #7. 

Claim Rejections - 35 USC § 103 

7- The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 
all obviousness rejections set forth in this Office action: 
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(a) A patent may not be obtained though the invention is not identically disclosed or described 
as set forth in section 102 of this title, if the differences between the subject matter sought to 
be patented and the prior art are such that the subject matter as a whole would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 

Examiner's note: Examiner lias pointed out particular references 
contained in the prior art of record in the body of this action for the 
convenience of the Applicant. Although the specified citations are 
representative of the teachings in the art and are applied to the specific 
limitations within the Individual claim, other passages and figures may 
apply. Applicant, in preparing the response, should consider fully the 
entire reference as potentially teaching all or part of the claimed invention, 
as well as the context of the passage as taught by the prior art or 
disclosed by the Examiner. 
8» Claims 11, 12, 15, 18, 19, 34, 35, 38, 41, 42, 57, 53, 61, 64, 65, 70~80, 83~ 
87, 92-96, and 101-105: are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Taylor (Object-Oriented Information Systems (c) 1992), 
in view of Pressman (Software Engineering: A Practitioner's Approach (c) 
1982-1997). 

Claims 11, 12, 15, 34, 35, 38, 57, 58, and 61: 

With regard to the limitations of: 

• receiving a request from an application for a 
customized implementation of a particular sen/ice; 
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• instantiating an implementation class which provides 
an implementation for the particular service to give 
rise to an implementation instance; 

• determining a set of zero or more restrictions to be 
imposed on said customized implementation; 

• instantiating a wrapper class to give rise to a wrapper 
instance, said wrapper instance comprising 
enforcement logic for enforcing said restrictions; 
encapsulating said implementation instance and said 
restrictions within said, wrapper instance; 

• providing said wrapper instance to the application as 
said customized implementation; 

• wherein said wrapper instance comprises one or 
more invocable methods, wherein said 
implementation instance comprises one or more 
invocable methods, and wherein encapsulating 
comprises; and 

• mapping the one or more invocable methods of said 
wrapper instance to the one or more invocable 
methods of said implementation instance 

• determining whether the implementation class is 
authentic; and 
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in response to a determination that the 



implementation class is authentic, instantiating the 



implementation class to give rise to said 



implementation instance; 



accessing information specifying one or more 



limitations; and 



processing said limitations to derive said restrictions 



Taylor in at least chapter 1 of his textbook introduces fundamental 
object-oriented software technology mechanisms. In chapters 3 and 4 
Taylor begins an in-depth teaching of the essentials in OOD/OOA 
technology, and further into the book, describes in detail techniques and 
procedures for programming in an object-oriented environment. The 
limitations contained within the claim language recite rudimentary 
characteristics and techniques that one of ordinary skill in the object- 
oriented programming art would understand and accept as common 
knowledge in the industry. See also Taylor's discussion on encapsulation 
of legacy systems beginning on page 296, which applies specifically to 
Applicant's wrapper instance of interfacing between various legacy 
encryption protocols currently in use. 

In addition, Pressman discloses object-oriented software 
engineering (pages 1-22 and 549-576), which support the basic 
OOD/OOA concepts that are considered common knowledge to any 
college-level programmer in the computer programming arts. Since the 
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Applicant appears to be merely claiming OOD/OOA programming 
concepts and principles, the cited references apply as a whole to the 
limitations of claims 11-23, 34-46, and 57-105. It would have been 
obvious to one of ordinary skill in the art at the time of the invention to 
combine Taylor and Pressman because these two textbooks teach the 
same programming techniques. 
Claims 18, 19, 41, 42, 64, and 65: 

With regard to the limitations of: 

• accessing information specifying one or more 
limitations; 

• determining permissions, if any, granted to the 
application; and 

• reconciling said limitations and said permissions to 
derive said restrictions. 

• said limitations and said permissions are reconciled to 
derive restrictions which are least restrictive. 

The combination of Taylor/Pressman discloses fundamental and 
intrinsic OOD/OOA concepts as shown above. 
Claims 70-80, 83-87, 92-96, 101-105: 

• determining said set of zero or more restrictions 
includes determining a set of zero or more restrictions 
that are specific to said application. 
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• determining said set of zero or more restrictions that 
are specific to said application includes determining a 
set of zero or more restrictions that are customized for 
said application. 

• said set is a first set, and wherein said customized 
implementation is a first customized implementation, 
and further comprising: 

• receiving a request from a second application for a 
second customized implementation of said particular 
service, wherein said second customized 
implementation differs from said first customized 
implementation; 

• instantiating said implementation class which provides 
said implementation for said particular service to give 
rise to a second implementation instance; 

• determining a second set of zero or more restrictions 
to be imposed on said second customized 
implementation, wherein said second set differs from 
said first set; 

• instantiating said wrapper class to give rise to a 
second wrapper instance, said second wrapper 



Application/Control Number: Page 9 

09/483,723 

Art Unit: 3621 

instance comprising enforcement logic for enforcing 
said second set of zero or more restrictions; 

• encapsulating said second implementation instance 
and said second set of zero or more restrictions within 
said second wrapper instance; and 

• providing said second wrapper instance to said 
second application as said second customized 
implementation. 

• said wrapper instance is invocable by the application 
without further interaction with the frameworl<, 

• the implementation class provides an unrestricted 
implementation for the particular sen/ice. 

• said enforcement logic enforces said restrictions on 
said implementation instance. 

• said enforcement logic enforces said restrictions on 
said implementation instance by: 

• receiving a set of desired parameters from the 
application; 

• determining whether the desired parameters exceed 
said restrictions; and 
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• in response to a determination that the desired 
parameters exceed said restrictions, preventing said 
implementation instance from operating. 

• said enforcement logic is invoiced upon initialization of 
said wrapper instance. 

• the system further comprises an exemption 
mechanism class which provides an implementation 
for a particular exemption mechanism, and wherein 
said method further comprises: 

• instantiating the exemption mechanism class to give 
rise to an exemption mechanism instance; and 

• encapsulating said exemption mechanism instance 
within said wrapper instance. 

• said enforcement logic is invoked upon initialization of 
said wrapper instance, and when invoked, said 
enforcement logic: determines whether said 
exemption mechanism instance has been invoked; 
and in response to a determination that said 
exemption mechanism instance has not been 
invoked, preventing said implementation instance 
from operating; 
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The combination of Taylor/Pressman discloses fundamental and 
intrinsic OOD/OOA concepts as sliown above. 
9. Claims 13, 14, 16, 17, 20-23, 36, 37, 39, 40, 43-46, 59, 60, 62, 63, 66-69, 
81, 82, 90, 91, 99, and 100 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Taylor (Object-Oriented Information Systems (c) 1992), 
in view of Pressman (Software Engineering: A Practitioner's Approach (c) 
1982-1997), and further in view of Shanton (US 5,369,702 A). 
Claims 13, 14, 16, 17, 36, 37, 39, 40, 59, 60, 62, and 63: 

The combination of Taylor/Pressman disclose fundamental and 
intrinsic OOD/OOA concepts as shown above, intrinsically disclosing: 

• determining wliether tlie implementation class is 
authentic; and 

• the implementation class authenticates the framework 
prior to giving rise to said implementation instance; 

Taylor/Pressman do not disclose verifying said digital signature and 
the particular service is an encryption/decryption service. However, 
Shanton discloses encryption, decryption, and digital signatures in an 
OOD/OOA environment. It would have been obvious to one of ordinary 
skill in the art at the time of the invention to combine the OOD/OOA 
programming concepts and principles of Taylor/Pressman with Shanton's 
OOD/OOA security techniques because this increases "...the security of 
the system, while at the same time giving the individual user a large 
amount of flexibility and power" (Shanton, c4:14-16). 
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With regard to the limitations of said information comprises a set of 
one or more default encryption limitations, and said default encryption 
limitations are derived by merging multiple jurisdiction policies and 
extracting therefrom the most restrictive encryption limitations, Taylor 
discloses interfacing with various legacy systems as shown above. 
Claims 20-23, 43-46, and 66-69: 

With regard to the following limitations, the combination of 
Taylor/Pressman discloses fundamental and intrinsic OOD/OOA concepts 
as shown above. 

• determining whether the application has been granted 
any permissions; and 

• in response to a determination that the application 
has not been granted any permissions, deriving said 
restrictions from said set of default encryption 
limitations. 

• determining whether the application has been granted 
any permissions which require implementation of a 
particular exemption mechanism; 

• in response to a determination that the application 
has been granted a permission which requires 
implementation of a particular exemption mechanism, 
determining whether said exempt encryption 
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limitations allow said particular exemption mechanism 
to be implemented; 
The combination of Taylor/Pressman does not disclose: 

• the particular service is an encryption/decryption 
service, and wlierein said information connprises a set 
of one or more default encryption limitations, and a 
set of zero or more exempt encryption limitations 
which apply when one or more exemption 
mechanisms are implemented. 

• said default encryption limitations and said exempt 
encryption limitations are derived by merging multiple 
jurisdiction policies and extracting therefrom the most 
restrictive encryption limitations. 

• in response to a determination that said exempt 
encryption limitations allow said particular exemption 
mechanism to be implemented, deriving said 
restrictions from said set of exempt encryption 
limitations. 

However, Shanton discloses encryption, decryption, and digital 
signatures in an OOD/OOA environment. It would have been obvious to 
one of ordinary skill in the art at the time of the invention to combine the 
OOD/OOA programming concepts and principles of Taylor/Pressman with 
Shanton's OOD/OOA security techniques because this increases "...the 
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security of the system, while at the same time giving the individual user a 
large amount of flexibility and power" (Shanton, c4: 14-16). See also 
Taylor's discussion on encapsulation of legacy systems beginning on 
page 296, which applies specifically to Applicant's wrapper instance of 
interfacing between various legacy encryption protocols currently in use. 
Claims 81, 82, 90, 91, 99, and 100: 

The combination of Taylor/Pressman discloses fundamental and 
intrinsic OOD/OOA concepts as shown above. Taylor/Pressman do not 
disclose: 

• the particular service is an encryption/decryption 
service, 

• the unrestricted implementation provided by the 
implementation class is capable of using unlimited 
encryption/decryption parameters; and 

• the unrestricted implementation provided by the 
implementation class is capable of using 
encryption/decryption keys of any size. 

However, Shanton discloses encryption, decryption, and digital 
signatures in an OOD/OOA environment. It would have been obvious to 
one of ordinary skill in the art at the time of the invention to combine the 
OOD/OOA programming concepts and principles of Taylor/Pressman with 
Shanton's OOD/OOA security techniques because this increases "...the 
security of the system, while at the same time giving the individual user a 
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large amount of flexibility and power" (Shanton, c4: 14-16). See also 
Taylor's discussion on encapsulation of legacy systems beginning on 
page 296, which applies specifically to Applicant's wrapper instance of 
interfacing between various legacy encryption protocols currently in use. 

Conclusion 

10. Applicant's amendment necessitated the new ground(s) of rejection 
presented in this Office action. Accordingly, THIS ACTION IS MADE 
FINAL. See MPEP § 706.07(a). Applicant is reminded of the extension of 
time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to 
expire THREE MONTHS from the mailing date of this action. In the event 
a first reply is filed within TWO MONTHS of the mailing date of this final 
action and the advisory action is not mailed until after the end of the 
THREE-MONTH shortened statutory period, then the shortened statutory 
period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the 
mailing date of the advisory action. In no event, however, will the statutory 
period for reply expire later than SIX MONTHS from the date of this final 
action. 
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Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to James A. 
Reagan whose telephone number is (703) 306-9131. The examiner can 
normally be reached on Monday-Friday, 9:30am-5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, 
the examiner's supervisor, James Trammell can be reached at (703) 305- 
9768. 

Any inquiry of a general nature or relating to the status of this 
application or proceeding should be directed to the Receptionist whose 
telephone number is (703) 305-3900. 

Any response to this action should be mailed to: 
Commissioner of Patents and Trademarks 

Washington, D-C. 20231 

or faxed to: 

(703) 305-7687 [Official communications; including 

After Final communications labeled "Box AF"] 

(703) 308-1396 [Informal/Draft communications, labeled 
"PROPOSED" or "DRAFT"] 

Hand delivered responses should be brought to Crystal Park 5, 
2451 Crystal Drive, Arlington, VA, 7^^ floor rec 

JAR 

25 Jun 2004 




